Allow empty directory request
return forbidden on directory listing and better error handling